Some Members of Conti Group Targeting Ukraine in Financially Motivated Attacks
By: Ravie Lakshmanan
Former members of the Conti cybercrime cartel have been implicated in five different campaigns targeting Ukraine from April to August 2022.
The findings, which come from Google's Threat...
New Stealthy Shikitega Malware Targeting Linux Systems and IoT Devices
By: Ravie Lakshmanan
A new piece of stealthy Linux malware called Shikitega has been uncovered adopting a multi-stage infection chain to compromise endpoints and IoT devices and deposit additional payloads.
"An...
Iran-Linked APT Cozies Up to ‘Enemies’ in Trust-Based Spy Game
A well-resourced advanced persistent threat (APT) group aligned with Iran's Revolutionary Guard Corps Intelligence Organization (IRGC-IO) and active since 2015 is targeting perceived threats to the Iranian government with...
Next-Gen Linux Malware Takes Over Devices With Unique Toolset
A Linux-focused malware dubbed Shikitega has emerged to target endpoints and Internet of Things (IoT) devices with a unique, multistage infection chain that results in full device takeover and...
FBI seeks Bitcoin wallet information of ransomware attackers
Three federal agencies in the United States — the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency and the Multi-State Information Sharing and Analysis Center —...
As LA Unified Battles Ransomware, CISA Warns About Back-to-School Attacks
As the school year kicks off across the country, the US Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to districts that threat actor group Vice Society is...
TeslaGun Primed to Blast a New Wave of Backdoor Cyberattacks
A newly discovered cyberattack panel dubbed TeslaGun has been discovered, used by Evil Corp to run ServHelper backdoor campaigns.
Data gleaned from an analysis by the Prodraft Threat Intelligence (PTI) team shows the Evil...
Mysterious ‘Worok’ Group Launches Spy Effort With Obfuscated Code, Private Tools
A relatively new cyber-espionage group is using an intriguing custom arsenal of tools and techniques to compromise companies and governments in Southeast Asia, the Middle East, and southern Africa,...
Defenders Be Prepared: Cyberattacks Surge Against Linux Amid Cloud Migration
Linux may not quite stack up to Windows when it comes to the raw number of attacks against systems running the operating system, but threat actor interest in Linux-based...
EvilProxy Commodifies Reverse-Proxy Tactic for Phishing, Bypassing 2FA
A phishing-as-a-service offering being sold on the Dark Web uses a tactic that can turn a user session into a proxy to bypass two-factor authentication (2FA), researchers have found.
The...
